Host · tessellate.ng · Production · criticality A
200 · Agent banking · sign in · Lagos · MainOne Cable Company · 4 open issues · first seen 18 Sep · last scanned Thu 15 Oct
two serious issues open
No Content-Security-Policy and no HSTS. Without a CSP, one injected script runs with full access to the page. On a checkout or sign-in page that's card or password theft.
What to fix on it first
4 issues · ranked by proof, then exploitation in the wild, then severity
Exploit code is public · 1
Gone since Thu 8 Oct · 1 not rechecked
Who gets its findings, and how much it matters
Owner routes findings · criticality moves them up the queue
Owner
Guessed from its name. Confirm it by choosing again
What it's for
What customers use
Criticality
Money moves or customer data lives here
Tags
What answers, from where, running what
As the last finished scan saw it
On the web
How it meets the internet
Straight onto the internet
Its own address answers. Whatever it runs, attackers reach directly.
Runs
What it offers anyone who asks
Open ports, the headers its pages send, the routes we know
Ports
Headers
Agent banking runs here. We haven’t been past its sign-in yet.
See the app